$ rpki-client -vvf rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft File: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft (raw, json) Hash identifier: iYrVYfT/8ez7LcHSsyUPi/NrXLnjodTlWcR2HS/eRas= Subject key identifier: A1:81:03:66:17:CC:08:B9:6D:00:4F:5D:D7:21:36:77:DA:44:5A:42 Authority key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 Certificate issuer: /CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Certificate serial: 1AD8FFB3398B5BC6EAF00FBD31CB4AE02FF10D6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 15:10:20 +0000 Manifest this update: Mon 20 Jul 2026 15:05:20 +0000 Manifest next update: Tue 21 Jul 2026 15:15:20 +0000 Files and hashes: 1: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: w2rrLKwQvnDkFhCZteOExsfVWuGGvpzrSdyrGmIOzEU=) 2: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: PzDjWUX+MVj+6J7B1iRzlwiphKEYQz+nq2Fc4OsYou4=) 3: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: 461gL5LYpfd/DVSQ0wQVmEx95n7sDL2Ki0MpmaYWYE8=) 4: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: HUrUqr6VOIuC0aE2gsmFrDbZuNmsTOPwd47q0S/1QYk=) 5: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: IEg9VS4+40+4nrODwfWuoU7C6J1Nopw04FOkjxxAImU=) 6: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl (hash: WxM3w2GkV4CGcOnBUiICgEqjYdLIZhVoWwCp8oi9Hhg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d8:ff:b3:39:8b:5b:c6:ea:f0:0f:bd:31:cb:4a:e0:2f:f1:0d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Validity Not Before: Jul 20 15:05:20 2026 GMT Not After : Jul 21 15:15:20 2026 GMT Subject: CN=A181036617CC08B96D004F5DD7213677DA445A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:aa:2c:e1:78:62:01:f7:1d:91:bf:5e:ca: b5:8a:fb:01:d7:5d:cc:1e:4c:41:ed:69:9a:49:b6: 4a:e8:98:d0:2e:48:c2:0e:db:ba:96:53:d6:b0:8f: a5:4e:67:b4:4e:e6:e0:65:fb:2f:1c:36:b7:54:cf: e6:6c:48:6d:5d:f5:e9:33:8b:e1:22:17:2d:b9:d8: 1b:d7:8c:31:71:5b:be:19:82:28:0f:21:5e:d4:97: e3:fd:8e:ab:97:52:92:5c:d3:74:0d:e6:cf:2c:52: c9:c5:5f:ca:62:9a:10:d3:6d:d0:63:26:22:95:aa: 27:c9:f1:be:f1:5e:36:3d:57:17:f0:19:c1:73:5c: a0:47:f7:4e:19:e2:11:ae:bb:f7:5c:ec:65:16:99: a3:02:3c:7d:53:89:5a:97:ef:e9:10:ce:b9:5c:39: 19:4b:96:93:09:ff:3c:d4:a9:b0:e5:19:cf:db:c4: dd:95:6a:fc:d0:8c:62:24:74:17:27:c8:03:d9:d2: 86:15:9e:1f:80:c9:37:c8:15:f7:ad:37:14:b7:56: 6b:4b:61:97:af:5f:23:ab:b2:db:35:b3:1f:ac:bb: e1:33:82:d3:5c:b0:11:bf:97:91:68:b1:b0:85:96: f4:5a:2f:8d:de:a1:5a:86:e0:9b:87:d8:4e:dc:11: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:81:03:66:17:CC:08:B9:6D:00:4F:5D:D7:21:36:77:DA:44:5A:42 X509v3 Authority Key Identifier: keyid:20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:26:20:66:9c:ef:80:ee:3c:29:0a:4b:29:a8:25:fa:cf:26: d1:41:a5:e0:68:fe:88:42:e4:9d:d9:50:31:e6:f9:6c:d7:e8: 5b:44:0d:1d:49:87:7d:69:2a:b2:24:23:0c:de:e0:b5:77:e7: e5:9d:f9:08:ae:36:cc:94:b1:60:87:bf:00:88:3c:e0:b6:0f: 6e:69:82:3f:94:9b:cb:85:a3:e3:b3:a8:ef:e9:41:40:e8:9f: 38:97:1b:56:15:e2:39:c9:41:7b:a4:b6:32:39:1b:1e:f6:aa: 19:e4:b9:1e:c5:f3:8a:0a:37:bc:b5:6e:c3:e0:f8:2e:8a:0b: 2f:99:6d:36:76:60:b8:7a:f4:14:13:6e:91:5a:65:93:77:c3: e1:d3:75:c3:ef:1b:52:b6:f1:65:ac:90:78:1b:bc:5a:3d:69: cf:c7:ca:a8:dc:c9:87:3a:32:20:23:24:53:d8:db:92:3e:7e: 72:8b:69:09:48:9d:93:53:db:6c:13:8a:b5:bc:c8:d2:09:71: 5a:3c:5a:8a:a0:ba:59:d5:dc:cf:c9:8f:42:7c:b7:59:84:84: 51:7a:9e:1f:4f:a6:72:ca:12:a1:ba:b3:d5:9a:01:0f:ba:c3: a4:9f:b9:39:38:4b:81:b0:8d:f1:ad:25:81:8d:b4:3f:12:f4: a0:06:fc:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtj/szmLW8bq8A+9MctK4C/xDWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFC M0FFQjI0NDAeFw0yNjA3MjAxNTA1MjBaFw0yNjA3MjExNTE1MjBaMDMxMTAvBgNV BAMTKEExODEwMzY2MTdDQzA4Qjk2RDAwNEY1REQ3MjEzNjc3REE0NDVBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYNKos4XhiAfcdkb9eyrWK+wHX XcweTEHtaZpJtkromNAuSMIO27qWU9awj6VOZ7RO5uBl+y8cNrdUz+ZsSG1d9ekz i+EiFy252BvXjDFxW74ZgigPIV7Ul+P9jquXUpJc03QN5s8sUsnFX8pimhDTbdBj JiKVqifJ8b7xXjY9VxfwGcFzXKBH904Z4hGuu/dc7GUWmaMCPH1TiVqX7+kQzrlc ORlLlpMJ/zzUqbDlGc/bxN2VavzQjGIkdBcnyAPZ0oYVnh+AyTfIFfetNxS3VmtL YZevXyOrsts1sx+su+EzgtNcsBG/l5FosbCFlvRaL43eoVqG4JuH2E7cEeJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoYEDZhfMCLltAE9d1yE2d9pEWkIwHwYDVR0j BBgwFoAUIH94SVuR3ZM6PGD7b186AbOuskQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3NDg1NmYtNzQ1My00ZDAyLWJjMzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1 QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFCM0FFQjI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdGNzg0OTVCOTFERDkzM0EzQzYwRkI2RjVGM0EwMUIzQUVC MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3NDg1NmYtNzQ1My00ZDAyLWJj MzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNB MDFCM0FFQjI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQmIGac74DuPCkKSymoJfrPJtFBpeBo/ohC 5J3ZUDHm+WzX6FtEDR1Jh31pKrIkIwze4LV35+Wd+QiuNsyUsWCHvwCIPOC2D25p gj+Um8uFo+OzqO/pQUDonziXG1YV4jnJQXuktjI5Gx72qhnkuR7F84oKN7y1bsPg +C6KCy+ZbTZ2YLh69BQTbpFaZZN3w+HTdcPvG1K28WWskHgbvFo9ac/HyqjcyYc6 MiAjJFPY25I+fnKLaQlInZNT22wTirW8yNIJcVo8WoqgulnV3M/Jj0J8t1mEhFF6 nh9PpnLKEqG6s9WaAQ+6w6SfuTk4S4GwjfGtJYGNtD8S9KAG/H8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:37:24 2026 by rpki-client